WooCommerce

Everything Shell Bulletin has reported about WooCommerce: 2 stories, newest first. Part of our Vulnerabilities coverage.

Vulnerabilities

Update Abandoned Cart Pro Immediately to Block Unauthenticated Admin Escalation via SQL Injection

Unauthenticated visitors can manipulate checkout fields to escalate accounts to administrator status in WooCommerce sites using plugin versions up to 10.8.0.

Oct 14, 2026

Vulnerabilities

Urgent: Patch PPOM WooCommerce Plugin to Block Unauthenticated RCE and File Deletion Attack

Unauthenticated attackers can delete server files and execute code via a critical path traversal bug in the PPOM WooCommerce plugin versions up to 34.0.10.

Oct 10, 2026